JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.97.131.198

Activity Trending Down

Abuse Confidence Score

75% Critical

20 reports

18 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 198.131.97.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇯🇵 Japan
City: Osaka, Osaka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 18 distinct reporters

First reported

October 29th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 4 🇳🇱 Netherlands 3

Most common categories Web App Attack 15 Bad Web Bot 8 Brute-Force 7 Hacking 2 SQL Injection 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-30 02:14:44 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.97.131.198 (198.131.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:14:39.971204 2026] [security2:error] [pid 2083:tid 2 ... show more (mod_security) mod_security (id:210492) triggered by 34.97.131.198 (198.131.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:14:39.971204 2026] [security2:error] [pid 2083:tid 2083] [client 34.97.131.198:54250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sipa.com.hk"] [uri "/.git/config"] [unique_id "auP9j9FOnhrjCJW0GLllOwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-10-30 00:25:09 UTC · (2 weeks ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-10-30 00:15:27 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.97.131.198 (198.131.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:15:23.688687 2026] [security2:error] [pid 31941:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.97.131.198 (198.131.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:15:23.688687 2026] [security2:error] [pid 31941:tid 31941] [client 34.97.131.198:49476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.shukrisharawico.com"] [uri "/.git/config"] [unique_id "auPhm_XCWJpNx_InOJZpJgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Grossmann-Gruppe	2026-10-30 00:12:18 UTC · (2 weeks ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇺🇸 MatCat	2026-10-30 00:05:37 UTC · (2 weeks ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇫🇷 Octopuce	2026-10-29 23:39:13 UTC · (2 weeks ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇦🇺 AWW-Admin	2026-10-29 22:52:09 UTC · (2 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 34.97.131.198 (JP/Japan/198.131.97.34.bc.googleusercontent.com)	SQL Injection
🇺🇸 TPI-Abuse	2026-10-29 17:52:18 UTC · (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.97.131.198 (198.131.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:52:12.683100 2026] [security2:error] [pid 9122:tid 9 ... show more (mod_security) mod_security (id:210492) triggered by 34.97.131.198 (198.131.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:52:12.683100 2026] [security2:error] [pid 9122:tid 9122] [client 34.97.131.198:44406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.scottcarper.com"] [uri "/.git/config"] [unique_id "auOHzBUvEYj_jAK5AeAPfQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-10-29 17:50:14 UTC · (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-10-29 17:38:50 UTC · (2 weeks ago)	34.97.131.198 - - [29/Oct/2026:19:38:49 +0200] "GET /.git/config HTTP/1.1" 404 3424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.131.198 - - [29/Oct/2026:19:38:50 +0200] " ... show more 34.97.131.198 - - [29/Oct/2026:19:38:49 +0200] "GET /.git/config HTTP/1.1" 404 3424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.131.198 - - [29/Oct/2026:19:38:50 +0200] "GET /.env.local HTTP/1.1" 404 3424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 FD-IX	2026-10-29 17:24:02 UTC · (2 weeks ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-10-29 17:23:07 UTC · (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-29 17:22:38 UTC · (2 weeks ago)	[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.131.198 - - [29/Oct/2026:18:22:35 +0100] "GET /.git/config HTTP/1.1" 301 661 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ... show more [ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.131.198 - - [29/Oct/2026:18:22:35 +0100] "GET /.git/config HTTP/1.1" 301 661 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-10-29 17:12:53 UTC · (2 weeks ago)	plesk-modsecurity - IP: 34.97.131.198 - [29/Oct/2026:18:12:51.889710 +0100] auN-kxMEhcx6IQR7IJwB3wAAAgo 34.97.131.198 45442 127.0.0.1 7081 [29/Oct/2026:18:12:52.379710 +0100] auN-lF9EsJufDMsxo_RglgAAABM 34.97.131.198 45462 127.0.0.1 7081 [29/Oct/202 ... show more plesk-modsecurity - IP: 34.97.131.198 - [29/Oct/2026:18:12:51.889710 +0100] auN-kxMEhcx6IQR7IJwB3wAAAgo 34.97.131.198 45442 127.0.0.1 7081 [29/Oct/2026:18:12:52.379710 +0100] auN-lF9EsJufDMsxo_RglgAAABM 34.97.131.198 45462 127.0.0.1 7081 [29/Oct/2026:18:12:52.618320 +0100] auN-lBMEhcx6IQR7IJwB4gAAAg0 34.97.131.198 45468 127.0.0.1 7081 [29/Oct/2026:18:12:52.855351 +0100] auN-lF9EsJufDMsxo_RglwAAAAU 34.97.131.198 45482 127.0.0.1 7081 show less	Web App Attack
🇫🇷 dynamix	2026-10-29 16:53:44 UTC · (2 weeks ago)	Multiple WAF Violations	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2001:470:1:c84::fa

🇰🇷 218.238.5.110

🇮🇩 182.9.48.33

🇺🇸 147.185.132.141

🇺🇸 34.21.29.212

🇺🇸 13.92.156.31

🇺🇸 209.182.203.227

🇧🇷 186.195.241.122

🇭🇰 156.225.17.60

🇨🇳 114.86.17.141

🇬🇧 88.97.191.176

🇳🇱 51.124.186.154

🇺🇸 20.118.27.138

🇺🇸 216.180.246.243

🇵🇰 206.135.179.175

🇳🇱 193.47.62.69

🇦🇷 190.83.64.105

🇰🇼 168.187.5.213

🇸🇳 154.125.192.83

🇧🇷 138.122.132.175